Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/nPAKjAAoFG29o9HUftfFBEfMFCA.roa
File: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (raw, json)
Hash identifier: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=
Subject key identifier: 9C:F0:0A:8C:00:28:14:6D:BD:A3:D1:D4:7E:D7:C5:04:47:CC:14:20
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01942521E2B4A3C74204A668EDDDABC9237D
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/nPAKjAAoFG29o9HUftfFBEfMFCA.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9192
IP address blocks: 91.126.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e2:b4:a3:c7:42:04:a6:68:ed:dd:ab:c9:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf00a8c0028146dbda3d1d47ed7c50447cc1420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:70:ad:e1:d3:b2:07:c4:b1:e8:5b:81:9b:
97:3d:a9:a3:a3:eb:d8:b7:28:29:bb:f6:7f:bd:cf:
61:42:31:03:2f:ba:ef:b2:aa:a7:32:a9:0a:62:81:
99:42:c3:e3:86:13:00:3c:a0:63:57:6b:87:fb:dc:
10:66:4b:0c:de:3f:12:fb:ab:d5:0b:bc:07:a2:a2:
8d:69:c4:fc:76:0b:a3:f9:6f:86:d3:8a:de:2d:9a:
5f:1b:62:df:c9:99:47:c6:06:a5:62:cb:0d:2a:31:
46:b1:39:bf:b7:3b:68:00:05:65:2c:1f:4f:80:f1:
b2:90:f1:4f:f5:5f:80:7b:80:c2:b8:40:1a:f6:6b:
8d:8e:7f:89:39:c9:12:8b:81:90:d5:df:0d:e9:01:
24:59:6f:45:20:14:61:4e:50:15:c7:d6:74:a4:a2:
40:40:d8:93:6e:a1:0a:db:32:d5:45:a7:3c:df:3d:
55:c7:cb:9e:38:55:fa:10:6e:0f:ba:78:c4:43:84:
48:b3:d7:fc:49:59:bc:78:87:1d:4c:4a:97:48:9b:
14:56:46:ca:00:fd:9e:f3:0e:f4:7c:8b:35:d8:a9:
4d:48:5a:81:f6:c2:49:04:da:f4:f7:98:11:73:fe:
de:cb:97:02:77:f1:1a:5b:f6:ac:27:d3:16:9c:26:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F0:0A:8C:00:28:14:6D:BD:A3:D1:D4:7E:D7:C5:04:47:CC:14:20
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/nPAKjAAoFG29o9HUftfFBEfMFCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.78.0/24
Signature Algorithm: sha256WithRSAEncryption
97:02:07:e4:59:d5:bb:a9:ca:6d:f7:38:9d:b6:51:41:27:88:
ce:2e:6d:e5:47:21:ca:42:b6:2e:c0:71:dc:c8:91:8a:55:1d:
ce:96:b7:1c:49:36:09:c4:cf:97:cf:09:41:c4:a0:0f:8d:c8:
fb:41:38:68:b8:ef:0f:76:0b:88:9b:83:3b:73:5b:b9:d6:96:
f4:de:bf:8a:49:b8:6d:c8:4e:ba:2e:48:0e:67:15:26:04:f3:
42:79:91:5c:79:2c:c0:41:79:3d:f3:b1:dc:cb:ca:7c:93:53:
45:6e:be:32:fb:e4:52:af:f1:61:9d:41:1e:55:4f:df:db:40:
8a:d4:9d:f4:75:ed:60:56:23:d9:dc:e8:09:ca:4f:79:34:72:
2a:52:13:59:2a:14:16:cc:48:7e:04:74:f8:27:1b:0f:16:c6:
01:6f:07:6f:68:8c:f0:61:0e:8a:95:19:3d:c7:5d:6c:49:af:
e6:f5:b2:af:a1:f9:c7:48:b3:b4:93:a4:4d:d7:14:44:be:56:
7e:46:7a:99:f1:9c:bd:2a:f8:d1:52:b3:70:59:43:8b:18:1d:
ce:1e:60:67:ff:82:de:0e:5b:8f:4a:da:36:de:44:b5:e5:a3:
ba:87:ab:9c:2f:9e:29:56:b7:b2:25:89:02:98:d8:88:ca:4f:
01:23:c2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:32 2025 by rpki-client